BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
- [remote] PCMan FTP Server 2.0.7 - Buffer Overflow
- [webapps] Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
- [local] Parrot and DJI variants Drone OSes - Kernel Panic Exploit
- [remote] Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
- [remote] AirKeyboard iOS App 1.0.5 - Remote Input Injection
- [webapps] PHP CGI Module 8.3.4 - Remote Code Execution (RCE)
- [remote] WebDAV Windows 10 - Remote Code Execution (RCE)
- [local] Microsoft Excel Use After Free - Local Code Execution
- [remote] Windows File Explorer Windows 10 Pro x64 - TAR Extraction
UK Considers Banning Ransomware Payment by Public Sector and CNI
/in General NewsSince no technical means have been found to curtail criminal extortion through prevention or attack, the new proposal is to eliminate its profitability.
The post UK Considers Banning Ransomware Payment by Public Sector and CNI appeared first on SecurityWeek.
SecurityWeek – Read More
Biden Signs Executive Order Aimed at Growing AI Infrastructure in the US
/in General NewsThe executive order comes on the heels of the Biden administration’s proposed restrictions on exports of AI chips, an attempt to balance national security concerns about the technology with economic interests of producers and other countries.
The post Biden Signs Executive Order Aimed at Growing AI Infrastructure in the US appeared first on SecurityWeek.
SecurityWeek – Read More
US issues final rule barring Chinese, Russian connected car tech
/in General NewsThe Commerce Department on Tuesday announced a new rule barring certain Chinese and Russian connected car technology from being imported to the United States.
The Record from Recorded Future News – Read More
Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks
/in General NewsAn ongoing campaign targeting FortiGate devices with management interfaces exposed on the public Internet is leading to unauthorized administrative logins and configuration changes, creating new accounts, and performing SSL VPN authentication.
darkreading – Read More
How to Eliminate “Shadow AI” in Software Development
/in General NewsWith a security-first culture fully in play, developers will view the protected deployment of AI as a marketable skill, and respond accordingly.
The post How to Eliminate “Shadow AI” in Software Development appeared first on SecurityWeek.
SecurityWeek – Read More
BforeAI Raises $10 Million for Predictive Attack Intelligence
/in General NewsBforeAI has raised $10 million in Series B funding, which brings the total raised by the security firm to more than $30 million.
The post BforeAI Raises $10 Million for Predictive Attack Intelligence appeared first on SecurityWeek.
SecurityWeek – Read More
Connecticut city of West Haven assessing impact of cyberattack
/in General NewsThe government of West Haven, a Connecticut city of more than 50,000 people, says it’s investigating an incident that forced it to shut down its IT systems recently.
The Record from Recorded Future News – Read More
Tennessee-based mortgage lender confirms December cyberattack
/in General NewsTennessee-based Mortgage Investors Group (MIG) did not outline how many customers were impacted by the attack but said they have hired a vendor to identify the affected individuals. The company said it expects to notify those customers directly once the process is completed in several weeks.
The Record from Recorded Future News – Read More
New Startups Focus on Deepfakes, Data-in-Motion & Model Security
/in General NewsIn times of unprecedented change, innovative mindsets and attentiveness of startup culture make for a community everyone can leverage to understand the world and guard against its dangers.
darkreading – Read More
Cyber Insights 2025: Cyber Threat Intelligence
/in General NewsCyber threat intelligence can inform decisions but is a complex issue. Where it is complete and accurate it is a huge boon.
The post Cyber Insights 2025: Cyber Threat Intelligence appeared first on SecurityWeek.
SecurityWeek – Read More